Latest AI and tech news
The private keys of eight eMudhra intermediate CA certificates, including their Sectigo cross-signs, were disclosed as compromised on October 20, 2026. Anyone holding one of these keys can issue certificates for any domain that chains to roots truste...
This release contains security fixes. This release note describes what’s different between Istio 1.31.2 and 1.31.3....
This release contains security fixes. This release note describes what’s different between Istio 1.30.6 and 1.30.7....
This release contains security fixes. This release note describes what’s different between Istio 1.29.9 and 1.29.10. 1.29 reached end of life on October 15, 2026, and this is an exceptional release to address ISTIO-SECURITY-2026-008. We encourage you...
As previously announced, support for Istio 1.29 has now officially ended....
An AuthorizationPolicy DENY rule with methods (or an ALLOW rule with notMethods) was compiled to a case-sensitive :method matcher. Over HTTP/2, a request whose method differs only in case (for example post instead of POST) did not match the rule and ...
This release contains security fixes. This release note describes what’s different between Istio 1.31.1 and 1.31.2....
This release contains security fixes. This release note describes what’s different between Istio 1.30.5 and 1.30.6....
This release contains security fixes. This release note describes what’s different between Istio 1.29.8 and 1.29.9. This is the final 1.29 release, as 1.29 reached end of life on October 15, 2026. We encourage you to upgrade to a supported release....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.31.0 and 1.31.1....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.30.4 and 1.30.5....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.29.7 and 1.29.8....
According to Istio’s support policy, minor releases like 1.29 are supported until six weeks after the N+2 minor release (1.31 in this case). Istio 1.31 was released on the 31st of August, 2026, and support for 1.29 will end on the 12th of October, 20...
We are pleased to announce the release of Istio 1.31. Thank you to all our contributors, testers, users, and enthusiasts for helping us get the 1.31.0 release published!
We would like to thank the Release Managers for this release, Jacek Ewertowski f...
Improved logging when a Gateway API CRD installed in the cluster is below the minimum version
required by this Istio version. The message is now logged at warn level and explains that
resources of that kind will not be processed until the CRDs are up...
This release contains security fixes. This release note describes what’s different between Istio 1.30.3 and 1.30.4....
This release contains security fixes. This release note describes what’s different between Istio 1.29.6 and 1.29.7....
The proxyVersion match expression in the EnvoyFilter resource (spec.configPatches[].match.proxy.proxyVersion) accepted a regular expression of unbounded length. Istiod compiles this expression during admission validation and again during configuratio...
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.30.2 and 1.30.3....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.29.5 and 1.29.6....
As previously announced, support for Istio 1.28 has now officially ended....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.28.9 and 1.28.10....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.30.1 and 1.30.2....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.29.4 and 1.29.5....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.28.8 and 1.28.9....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.30.0 and 1.30.1....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.29.3 and 1.29.4....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.28.7 and 1.28.8....
You are impacted if you are running an affected version of Istio and accept downstream HTTP/2 traffic.
This includes any Istio deployment that exposes services to external clients or untrusted workloads over
HTTP/2 or gRPC, as an attacker can send sp...
According to Istio’s support policy, minor releases like 1.28 are supported until six weeks after the N+2 minor release (1.30 in this case). Istio 1.30 was released on the 18th of May, 2026, and support for 1.28 will end on the 28th of June, 2026....
We are pleased to announce the release of Istio 1.30. Thank you to all our contributors, testers, users, and enthusiasts for helping us get the 1.30.0 release published!
We would like to thank the Release Managers for this release, Petr McAllister fr...
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.29.2 and 1.29.3....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.28.6 and 1.28.7....
Improved endpoint selection for multi-network environments to use the gateway for network-specific endpoints when the local proxy network is unset....
CVE-2026-39350 / GHSA-9gcg-w975-3rjh: (CVSS score 5.4, Moderate): AuthorizationPolicy serviceAccounts regex injection via unescaped dots.
Reported by Wernerina....
This release contains security fixes. This release note describes what’s different between Istio 1.29.1 and 1.29.2....
This release contains security fixes. This release note describes what’s different between Istio 1.28.5 and 1.28.6....
As previously announced, support for Istio 1.27 has now officially ended....
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.27.8 and 1.27.9....
The Istio Security Committee wants to address a possible Man-in-the-Middle attack scenario in which a VirtualService can redirect or intercept traffic within the service mesh. It affects only namespace-based Multi-Tenant environments....
This release contains security fixes. This release note describes what’s different between Istio 1.29.0 and 1.29.1....